Iran suspected of cyberattacks on US water utilities in 45 municipalities

Seven U.S. states have reported cyberattacks on their water supply control systems, with some officials suspecting Iran is behind the incidents. According to The New York Times, there is no definitive proof yet that Iran orchestrated these attacks, but similar actions have escalated since the U.S. began its bombing campaign against the country.

The attackers made no financial demands, suggesting state actors—rather than financially motivated criminals—may be responsible.

First Reports and Current Status

Minnesota was the first state to report such an attack, followed shortly by Michigan. While no major disruptions have made tap water unsafe to drink, local and state authorities remain vigilant. They are particularly concerned about older computer systems that monitor water quality, adjust chemical treatments, and control water pressure—especially those connected to the internet.

Impact on Small Communities

Braham, Minnesota, a small city of fewer than 2,000 people located about 50 miles north of Minneapolis, is one of the affected areas. Mayor Nate George said the city has received guidance on resolving the issue and strengthening defenses. The town is currently using manual control to keep water service running.

George expressed concern about long-term solutions: "I think the troubling thing on the horizon is how do we move forward to a more secure system. IT infrastructure upgrades are very costly, and we are a very small municipality."

He also echoed suspicions from federal officials: "We're getting bits and pieces of information from the state of Minnesota and the F.B.I. They are pretty sure it's Iranian actors."

White House Response

While states scramble to protect utilities and critical infrastructure, the White House has downplayed the suspected state-backed cyberattacks. President Donald Trump told a reporter, "I think Minnesota is behind it. I don't think there was an Iranian cyberattack."

Broader Context

This is not the first time Iranian hackers have targeted a U.S. institution during the 2026 war, but it is the first time essential services and infrastructure within the mainland have been affected. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has previously warned about potential Iranian cyberattacks, though smaller municipalities remain vulnerable.

Iran has also been on the receiving end of cyberattacks linked to the U.S. The most notable was Stuxnet, reportedly used in 2009 to damage critical tools in Iran's nuclear program. More recently, the CanisterWorm malware attacked Iranian machines and wiped them clean for no apparent reason. No one has claimed responsibility for that attack.

A New Domain of Warfare

"Wars have always been fought on land and on sea, and more recently, in the air and in space. But as the internet has become indispensable for society, cyberspace has quickly become a fifth domain that states must protect and dominate," Gov. Tim Walz said on X. "This is what modern warfare looks like."

Get Tom's Hardware's best news and in-depth reviews, straight to your inbox. Follow Tom's Hardware on Google News, or add us as a preferred source, to get our latest news, analysis, and reviews in your feeds.